With competent authentication, nobody could hack the system. But competent authentication is not trivial.
I’d sooner trust somebody on the ground to be a good guy, because at worst, police can still burst in on them, something impossible for this copilot turned hijacker.
I seriously doubt that any police action could be taken in an 8 minute envelope considering determining threat, court orders and tracing.